Security researchers have discovered a new version of the Vultur banking trojan for Android.
A Trojan horse is a type of malware that is downloaded onto a system disguised as a legitimate program.
1
Hackers often use social engineering methods, such as phishing, to hide malicious code inside legitimate software.
Phishing is when attackers trick people into revealing sensitive information via email or text messages (smishing).
Once the software reaches your device, it can discreetly infiltrate it to steal sensitive information.
And this new advanced version of Vultur is ringing alarm bells because it has more advanced remote control capabilities, Bleeping Computer reported.
TROJAN EAGLE
Vultur was first discovered in 2021 by researchers at the fraud detection company ThreatFabric.
Fast forward to 2022, and it was discovered that the Trojan was being distributed through Google Play via malicious apps.
Now researchers have discovered that the Trojan pretends to be McAfee’s cybersecurity software.
Fraudsters send SMS messages to Android users saying they have detected an unauthorized transaction from their bank accounts.
The fraudulent message then asks the potential victim to call a number that will help them solve the problem.
WHAT HAPPENS IF I DOWNLOAD IT?
If you accidentally download a trojan to your device, it will gain access to your Android device.
It can start recording your activity, steal your password information, and even allow hackers to take control of your device.
The newer version can also do things like download, transfer, delete, install and locate files on your phone.
HOW TO STAY SAFE
There are several ways users can avoid coming into contact with malware or Trojans.
Telephone fraud statistics
Americans are bombarded with three billion unwanted phone calls per month. What are the figures on the number of victims and the amount of money lost by fraudsters
- In 2022, Americans lost an estimated $39.5 billion to phone scams, and 68.4 million American citizens were affected, according to TechReport.
- The average victim of phone fraud lost $567.41 each in 2021, a big increase from the 2021 figure of $182 per victim, according to Hiya.
- Most fraud occurs over the phone, and fraudsters are twice as likely to call compared to text in 2021, the Federal Trade Commission (FTC) reports.
- In 2021, the US saw a 56% increase in unwanted phone calls, of which 60% were robocalls.
- US residents experienced an average of 18 unwanted phone calls per month, although some experts believe the actual number could be as high as 31 per month.
- Many phone calls from reputable companies can be mislabeled as spam, but 38% of companies have no idea whether they’ve been flagged as a “potential scam” or not, according to Hiya.
- Never give out any personal or financial information if you suspect a phone call is a scam. For example, your bank will never ask you for full details over the phone.
- To reduce unwanted phone calls and scams, sign up for the Do Not Call Registry. Telemarketers will be required by law to check that list before calling you.
- Downloading third-party apps like Hiya, Nomorobo, or Truecaller can help filter out annoying spam calls.
- Try not to share your phone number unless you have to, especially online or with obscure sources.
For starters, users are advised to avoid downloading apps outside of Apple’s or Google’s official app stores.
Always keep your phone software up to date as updates often include security patches.
Never download a link or open an attachment from an email or text message that seems strange, suspicious, or unfamiliar.
It is also important to install an antivirus program on your device so that it can scan for malware.